I have two Apache servers running PHP. One accepts forward-slashes in the query string and passes it along to PHP in the expected way, for example:
http://server
Do you have mod_security installed? See this thread:
mod_security
403 Forbidden on PHP page called with url encoded in a $_GET parameter